bugfix: use plain strings instead of Mongo ID objects